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REL I ABILITY  ANALYS  I S 


A.  INTRODUCTION. 

1.  This  report  is  a compilation  of  reliability  test  results  of  the 
Reliability  Demonstration  Test  for  the  Liquid  Oxygen  Modular  Cryogenic 
Generator.  The  purpose  of  this  test  was  to  measure  the  reliability  mean 
Time  between  failure  and  verify  that  the  Liquid  Oxygen  Generator  (LOX-30) 
is  able  to  perform  its  intended  mission  without  excessive  failures. 

2.  The  test  was  conducted  in  accordance  with  the  provisions  of  MIL- 
STD-781  and  the  procedures  of  the  detailed  test  plan.  Accept/reject 
criteria  were  based  on  Test  Plan  VIII  with  specified  mean  time  between 
failure  (MTBF)  of  1900  hours.  Total  test  time  was  1617  hours. 

3.  Reliability  and  maintainability  demonstration  tests  were  coordin- 
ated and  performed  by  the  same  personnel  using  similar  criteria  and  pro- 
cedures, therefore  resulting  data  are  consistent  and  applicable  to  either 
test. 


4.  The  following  documents  were  used  to  establish  test  procedures, 
standardize  operating  and  maintenance  requirements,  and  evaluate  test 
results. 

a.  MIL-STD-781B  Reliability  Tests:  Exponential  Distribution 

b.  Reliability  and  Maintainability  Demonstration  Plan 

c.  MIL-STD-721  Definitions  of  Effectiveness  Terms  of  Relia- 
bility, Maintainability,  Human  Factors  and  Safety 

d.  Reliability  Engineering  Handbooks,  NAVAIR  00-65-502 

e.  MlL-D-27210  Oxygen,  Aviators  Breathing,  Liquid  and  Gas 


B.  BACKGROUND. 

1.  The  Liquid  Oxygen  Generator  is  required  at  Naval  Air  Stations  over- 
seas to  produce  oxygen  used  in  servicing  air  crew  survival  equipment,  and 
medical  units.  The  oxygen  is  produced  as  a cryogenic  liquid  for  conven- 
ience of  storage  and  when  required  the  liquid  oxygen  is  utilized  to  fill 
aircraft  liquid  oxygen  converters  and  vaporized  into  a gas  and  transferred 
to  gas  cylinders. 

« 

2.  The  mission  of  the  LOX-30  generator  is  to  provide  600  to  1600  gallons 

I per  month  of  high  purity  liquid  oxygen  to  fulfill  daily  operational  requlre- 

i ments  and  maintain  a sufficient  level  of  oxygen  storage  to  continue  fulfill- 

ing operational  requirements  in  the  event  of  equipment  maintenance  due  to 

I failure. 

C.  DESCRIPTION  OF  EQUIPMENT. 

j 1.  The  Liquid  Oxygen  Generator,  LOX-30,  consists  of  the  following  sub- 

* systems  and  is  represented  in  a block  diagram  in  Figure  1. 

1 

1 
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2.  Subsystem  Number  10  - Engine.  The  cryogenerator  engine  Is  a self 
lubricated  four  cylinder  closed  cycle  expansion  engine  cooler.  An  inte- 
grated working  piston  and  displacer  assembly  operating  in  a single  cylin- 
der and  connected  to  a common  crankshaft  journal  form  the  nucleus  of  the 
engine  operation  and  achieve  the  alternate  compression,  displacement  and 
expansion  of  the  working  gas.  The  crankshaft  is  supported  by  five  main 
and  insert  bearings.  Axial  forces  are  transferred  to  the  crankcase  via 

a thrust  bearing.  Lubrication  is  provided  by  an  Integral  gear  type  oil 
pump  driven  by  the  engine  via  a nylon  coupling. 

3.  Subsystem  Number  20  - Header.  Located  atop  and  around  the  cylin- 
der housing  assemblies,  the  condenser  consists  of  four  condensing  heads 
which  form  the  top  of  the  engine  cylinders.  Regenerators  are  positioned 
within  each  level  and  perform  their  heat  transfer  function  as  the  working 
gas  flows  through  each  while  passing  between  the  expansion  and  compression 
chambers.  The  condenser  heads  are  connected  in  parallel  and  are  slotted  to 
provide  a greater  cooling  surface  area.  In  the  event  of  a cracked  head,  a 
safety  valve  will  relieve  condenser  Insulating  space  pressure  at  about  2 
psig.  An  underpressure  safety  switch  monitors  condenser  head  pressure  and 
will  shut  down  the  engine  should  excessive  under  pressure  occur. 


4.  Subsystem  Number  30  - Water  Cooling.  Continuous  operation  of  the 
LOX-30  requires  approximately  1200  gallons  per  hour  cooling  water  at  30  to 
60  psig  and  temperature  at  59  to  70'^F.  Water  is  delivered  to  a manifold 
from  where  it  is  distributed  to  four  helium  coolers  atop  the  cylinder  hous- 
ing assemblies.  Each  helium  cooler  receives  water  flow  to  remove  the  work- 
ing gas  heat  of  compression.  Should  water  temperature  exceed  115  + 5*^?,  a 
thermostat  in  the  outlet  manifold  is  set  to  shut  down  the  engine. 


5.  Subsystem  Number  40  - Drive  Motor  and  Coupler.  The  60  HP  continuous 
duty  drive  motor  is  horizontally  mounted  to  the  cryogenerator  bed  plate  and 
is  connected  to  the  engine  through  a flexible  coupling.  The  flexible  coup- 
ling compensates  for  slight  misalignment  of  the  drive  motor  armature  and 
engine  crankshaft.  The  60  HP,  3 phase  motor  is  of  drip-proof  construction 
having  grease  packed  ball  bearings  supporting  a squirrel  cage  armature  In  the 
motor  frame. 


6.  Subsystem  Number  50  - Air  Compressor.  The  Atlas  Copco  Air  Compressor, 
BT-4,  is  a two-cylinder,  two  stage  air  cooled  reciprocating  compressor.  The 
BT-4  compressor  is  built  for  working  pressure  up  to  125  psig  with  one  low 
pressure  and  one  high  pressure  cylinder  "V"  mounted  on  the  crankcase  and 
equipped  with  an  element  type  Inlet  filter.  The  unit  contains  an  Intermediate 
air  cooler,  a pressurized  lubricating  oil  system  with  an  oil  pressure  gage, 

an  alr-lntake  suction  filter  with  silencer,  compressor-air  shock  absorber, 
safety  valves  and  pressure  gauges  for  Intermediate  and  discharge  pressures. 

The  air  compressor  is  driven  by  a 40  HP  electric,  3 phase  continuous  duty 
drive  Iwth  a squirrel  cage  armature  in  the  motor  frame. 

7.  Subsystem  Number  60  - Molecular  Sieve  Station.  The  molecular  sieve 
staf li>n  consists  of  an  air/water  aftercooler,  a water  separator,  an  oil  ad- 
sorber, two  molecular  sieve  adsorbers,  and  an  electric  heater,  all  mounted 

on  .1  ciimmon  base,  and  Interconnected  by  the  required  piping.  A power  module. 
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which  contains  the  electrical  equipment  necessary  to  dlstrlhvite  power  to  t lie 
other  units  as  well  as  the  electrical  contri>ls  necessary  tor  renenerat ton  ot 
the  adsorbers,  Is  mounted  at  the  rear  ot  t tte  molecular-sleve-stat Ion  skid. 

8.  Subsystem  Number  _7_0  - Cold  Box  t sepa  r a 1 1 on  un  1 1 1 . Tlte  cold  bv'x  con- 
sists of  a cy  I Indr  lea  I ly  shaped  steel  shell  wltlt  an  externallv  nuumted  In- 
strument and  control  valve  panel.  The  sttell  Is  comprised  of  t lie  lollowln>; 
contents.  A heat  exchanger  which  cools  tlie  process  air  and  warms  tlie  tall 
gas  leaving  tt»e  unit.  Rectification  column  tltat  separates  tlie  process  air 
Into  pure  liquid  oxygen  and  Impure  nltrogt'ii  gas.  t'ondenser /evaporat or  that 
prepares  the  media  used  In  the  rectification  column  for  nvass  transter.  An 
electric  heater  to  Increase  product  transfer  to  the  storage  tank  Is  provided 
and  located  on  the  face  of  the  cold  box. 

9.  S_ubs^sten^_Numbt^r  JiO  - Klect  r IcaJ^  C_ot\t_^ol  I’aiu'l.  I'he  control  panel 
contains  Indicating  Instruments,  Indicating/alarm  llglits,  lighted  and  un- 
llghted  push  bvitton  switches,  and  an  elapsed  time  meter,  .ill  ot  which  are 
used  In  the  manual  and  automatic  control  of  the  plant.  The  indlc.it ing  in- 
struments on  the  panel  are  pneumatic  (for  helluiii  pressures'),  hvdr.iullc  flor 
oil  pressures),  and  electric  (.ammeter  and  elapsed  time),  iMch  of  which  Is 
marked  to  Identify  the  particular  v.-ir  table  measured  and  displayed.  indica- 
ting l.imps  are  used  to  indicate  operating  or  non-operating  circuits  as  well 
as  tault  or  alarm  Indications  at  selected  points  In  the  system.  Kach  indi- 
cator is  marked  to  Identify  the  condition  or  point  involved.  Vhe  lower 
section  of  the  control  panel  contains  a subpanel  with  control  relays.  The 
relay  subpanel  can  be  reached  through  .i  door  on  the  rear  ot  the  panel. 

10.  Subsystem  Number  _9il  - Helium  Olst r (but  ion . Helium  gas  is  used  as 
the  wiM'klng  gas  agent  within  the  engine.  I’he  helium  Is  provided  in  re- 
pl.iceable  externally  mounted  pressurized  containers.  A pressure  regulator 
and  safety  valve  mounted  on  the  cylinder  ensures  the  gas  is  of  correct  pres- 
sure for  Introduction  Into  the  engine.  The  engine  is  pressurized  to  approx- 
Im.itelv  199  pslg  min.  static  pressure.  During  engine  operation,  the  pressun 
will  rise  to  370  pslg  max.  A helium  t liter  and  v'll  separ.it  Ion  unit  cleanses 
the  gas  before  it  enters  the  cylinder  housing  .issemblv  eccentric  ch.imber 
prior  to  Introduction  Into  the  compression  chamber. 

11.  Subsy.stem  Number  100  - Inst rumentat  Ion  and  Mcnil_t^rs.  The  subsystem 
consists  of  various  pressure  gages,  pressure  switches,  temperature  monitors, 
and  water  flow  sensors,  each  capable  ot  Interrupting  system  operation  should 
the  toler.inces  be  exceeded. 

P . Ml  HW. 

1.  The  reliability  demonstration  test  was  comprised  I'f  three  parts,  tl) 
Knvlronmental  i)ua 1 1 f Icat ion , (2)  Reliability  Orowth  and  ( O Reliability  Dem- 
onstration, all  of  which  were  run  concurrently  from  March  1977  through 
August  1977  on  one  sample  l,0X-30  system  at  the  l.akehurst  N.'ival  .Mr  St.it  U'n 
l.akehurst.  New  .lersev.  The  1,OX-30  system  was  v'perated  with  the  assistance  ot 
in  instruction  nuinual  provided  by  the  contractor  .ind  in  .iccor dance  with  oper- 
.itlonal  procedures  prepared  bv  the  Naval  Air  Knglneerlng  t'enter,  t'l'de  9J714. 
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2.  Prior  to  Initiation  of  the  reliability  and  maintainability  demon- 
stration tests,  the  LOX-30  system  had  been  operated  by  the  contractor  and 
Code  92714  a total  of  710.3  hours  (l.e.,  cryogenerator  time).  The  bal- 
ance of  operational  time,  1616.3  hours,  was  run  in  accordance  with  the 
reliability  demonstration  teat  plan.  A brief  outline  of  the  reliability 
demonstration  test  period  Is  enclosed  In  Appendix  A. 

II.  ENVIRONMENTAL  QUALIFICATIONS  TEST 

A.  AR-113  requires  that  environments,  both  natural  and  Induced,  imposed 
during  test  shall  be  based  on  field  environments. 

1.  The  LOX-30  Liquid  Oxygen  Generator  will  be  deployed  as  a fixed  in- 
stallation, properly  housed  within  a temporary  or  permanent  structure. 
Consequently,  the  generator  will  not  be  exposed  to  any  adverse  ambient  en- 
vironmental condition.  Ambient  air  temperatures  and  humidity,  however, 

do  effect  the  net  productivity  of  the  generator,  which  is  true  for  all  cryo- 
genic generators  that  are  basically  air  liquefaction  plants.  The  combination 
of  high  air  temperature  and  high  relative  humidities  do  reduce  the  production 
rate  of  the  LOX-30  system.  The  environmental  test  portion  of  the  program 
consisted  of  operating  the  system  in  temperature  ranges  of  50'^  to  lOO^F  for 
1617  hours  after  which  no  relevant  failures  were  observed.  This  demonstra- 
ted a svstem  MTBF  of  at  least  1900  hours  at  70%  confidence,  however,  the 
MTBF  for  those  piece  parts  which  experienced  no  failure  could  not  be  deter- 
mined with  any  degree  of  confidence.  Therefore  further  life  testing  to 
obtain  additional  data  should  be  proposed  followed  by  stress-strength 
testing  on  selected  components. 

2.  An  investigation  of  the  environmental  conditions  was  made  to  deter- 
mine the  maximum  and  minimum  air  temperatures  and  relative  humidities  that 
might  be  anticipated  at  all  the  overseas  Naval  Air  Stations.  These  data 
are  available  in  the  publication,  "U.S.  Navy  and  Marine  Corps  Meteorological 
Station  Climatic  Summaries".  It  was  determined  that  the  normal  weather  con- 
ditions which  prevail  at  NAFX,  Lakehurst  would  provide  sufficient  tempera- 
ture and  humidity  excursions  during  the  environmental  period  of  the  Relia- 
bility Test  Program  that  no  special  test  chamber  would  be  necessary.  Be- 
cause the  LOX-30  is  to  be  installed  indoors,  no  other  environmental  tests 
(i.e.,  rain,  sand,  vibration,  etc.)  were  to  be  conducted.  Since  the  mois- 
ture content  of  the  inlet  air  to  the  generator  is  the  major  factor  upon 
reliability,  the  tests  were  conducted  accordingly.  This  is  true  because 

the  effect  of  humidity  and  temperature  is  great  on  production. 

3.  The  ambient  air  temperatures  and  relative  humidities  were  recorded 
by  a Hygrothermograph,  Model  Serdex  B,  Bacharach  Instrument  Company,  at 
the  compressor  air  inlet. 
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4.  Conclusion. 

The  test  data  indicates  that  althounh  the  LOX-30  plant  did 
experience  operating  periods  where  atmospheric  moisture  content  was 
high,  no  adverse  operating  situations  were  experienced  during  the 
test  period. 

The  highest  average  moisture  content  level  recorded  at  the 
overseas  installations  Is  .0215  pounds  water  per  pound  dry  air.  The 
highest  level  recorded  during  the  test  program  at  Lakehurst  was  .0270. 

The  mission  requirement  has  been  determined  to  be  less  than  ^ 
days.  Therefore  the  LOX-30  can  adequately  meet  the  mission.  Test  data 
are  provided  in  Appendix  B. 

III.  RELI  ABI  LI  I's  GROWTH 


A.  This  part  constituted  the  growth  test  commencing  after  710  operating 
hours  on  the  LOX-30  system.  Periodic  and  1500  hour  maintenance  was  com- 
pleted by  NAEC. 

B.  The  values  predicted  on  the  Mission  Analysis  and  the  Program  Master 
Plan  are  established  as  follows: 

Specified  MTBF  1900  hours 

Predicted  MTBF  1.77  0^^-  3375  hours 
Growth  Rate  =■  .70 

These  values  establish  the  Reliability  Growth  Model  which  is  graphi- 
cally presented  in  Figure  2.  The  objective  of  the  growth  program  is  to 
set  a goal  which  will  guide  the  development  program  step  by  step  so  that 
the  reliability  requirement  will  be  met  at  least  within  the  final  stage 
development . 

C.  The  L0.\-30  System  Growth  Test  began  and  continued  without  experiencing 
a relevant  failure.  Premature  shutdowns  due  to  power  failure  and  water 
chiller  breakdown  did  occur  during  the  test  period.  .\t  no  time  during  the 
Reliability  Growth  Test  was  any  major  corrective  maintenance  taken  on  the 
1,OX-30  system. 


n.  At  875  hours  of  reliability  growth  test  time,  no  relevant  failures  had 
occurred.  Assuming  one  failure  in  order  to  calculate  MTBF,  the  growth 
rate  at  875  hours  is  equal  to  the  minimum  growth  rate  of  .60.  It  was  con- 
cluded to  continue  the  test  to  1500  hours  which  would  produce  a growth 
above  minimum  and  within  the  specified  rate  envelope  at  the  time  of  the 
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1500  hour  preventive  maintenance.  At  this  time  the  urowtli  test  was  con- 
cluded and  the  test  accredited  toward  reliability  demonstration. 


IV.  RELIABILIIY  DEMONSTRATION 

A.  The  reliability  demonstration  was  conducted  In  accordance  with  pro- 
visions of  Mll.-STn-781  and  the  procedures  of  the  reliability  and  main- 
tainability demonstration  test  plan. 

B.  Durlnx  the  entire  test,  a total  of  eluht  personnel  were  used  to  mon- 
itor the  1,OX-30  system  24  hours  per  day,  four  shifts  per  day.  When  the 

l.OX-10  was  In  production  the  followliiR  i>erformance  parameters  and  limits 
were  used  as  a baseline  for  the  reliability  test. 

1.  t’ur ity  - i)ure  measured  with  a Becknu)n  Analyzer  - Thermal 

C. ond  uc  1 1 V 1 1 y Principle. 

(UI2  5.0  ppm  or  less 

(Tl^  25.0  ppm  or  less 

N2O  1.0  ppm  or  less 

II.  Odor  - Any  detection  of  odors  shall  In*  cause  for  rejection. 

III.  Production  Ratje  - Minimum  b.62  nal/hr. 

A uraphlcal  Illustration  of  I,OX-'10  monthly  and  dally  flow  rates  are 
presented  In  Appendix  0. 

C . KIKITY. 

Throughout  the  reliability  test,  purity  was  monitored  and  recorded  on 
a dally  run  sheet.  Numerous  occasions  arose  where  liquid  oxygen  purity 
would  wander  below  99.5%  primarily  due  to  excess  operator  adjustment  and 
atmospheric  conditions.  On  the  average,  after  low  purity  was  discovered 
and  adjustments  made,  liquid  oxygen  purity  would  return  to  minimum  99.5'/. 
within  45  to  60  min.  Constituent  tests  were  conducted  as  per  Mll,-I')-27210 
on  a weekly  basis  and  where  practicable.  Throughout  the  test  period  Carbon 
Dioxide  (CO2),  Methane  (CH/,),  and  Nitrous  Oxlile  (N2O)  were  detectable,  all 
other  constituents  showed  no  trace. 

A summary  of  constituent  test  results  are  In  Tabli*  1. 


rABLI''.  1 


Da^te 

I. eve  1 s 

March  10 

CM/, 

17.5  ppm 

N2O 

. 54  ppm 

CO2 

1 . 0 ppm 

April  b 

Cll/, 

18.0  ppm 

N2O 

.40  ppm 

CO2 

.60  ppm 

6 
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Date 

] 

Levels 

Kemarks 

April  13 

CH4 

15.5 

ppm 

N2O 

.49 

ppm 

CO2 

.79 

ppm 

April  26 

CH4 

14 

ppm 

Excess  CO2  count  duo  to 

N2O 

.28 

ppm 

excess  time  on  adsorber 

CO2 

13.0 

ppm 

bed . 

May  4 

CH, 

16.5 

ppm 

N2O 

.52 

ppm 

CO2 

2.0 

ppm 

Juno  23 

CH 

19.0 

ppm 

N23 

.84 

ppm 

C02 

2.4 

ppm 

Juno  29 

CH4 

19 

ppm 

N20 

.9 

ppm 

CO  2 

2.0 

ppm 

July  5 

CH4 

17.5 

ppm 

Machine  liquid  lov'd 

N2O 

.94 

ppm 

operating  range  unstable 

CO  2 

12.0 

ppm 

when  samples  wore  taken. 

July  18 

CH4 

13.0 

ppm 

Sample  spoiled  during 

N2O 

.76 

ppm 

transit.  CO2  count  high. 

CO  2 

9.0 

ppm 

July  31 

CH4 

13.0 

ppm 

Sample  taken  from  500  gal 

N2O 

.76 

ppm 

storage  tank  and  machine. 

CO2 

3.3 

ppm 

August  3 

CH4 

13.5 

ppm 

CO2  high  due  to  change  of 

N2O 

.6 

ppm 

adsorber  bed  Interval  60  to 

CO2 

11 

ppm 

90  min  per  contractor  manual 

August  11 

CH4 

21.5 

ppm 

CO2  high  due  to  adsorber 

N2O 

.6 

ppm 

bed  interval  change. 

CO2 

11.0 

ppm 

August  17 

CH4 

29.5 

ppm 

All  levels  high  due  to 

N2O 

4.0 

ppm 

adsorber  bed  interval 

CO2 

21.0 

ppm 

time  change. 

August  19 

CH4 

26.0 

ppm 

90  minute  time  duration 

N2O 

1.4 

ppm 

too  long.  Recommend  1 hour. 

CO2 

12.0 

ppm 

J 

t 

i 

1 


j 

i 

'! 
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D.  PRODUCTION  RATE. 


Calculations  of  liquid  oxygen  flow  rate  were  Initially  conducted  by 
attaching  the  product  hose  to  a 50  gallon  tank  and  recording  the  time 
to  fill.  At  the  time  of  the  third  week,  a Rotometer  from  Fisher  and 
Potter,  Warminster,  PA.  was  obtained  and  used  as  the  primary  Instrument 
for  obtaining  liquid  oxygen  flow  rates.  Average  flow  rates  are  presented 
In  Table  II. 


TABLE  II 

Week  of 

Rate 

Remarks 

April  4 & 11 

3.17  gal/hr 

3.61  gal/hr 

Poor  instrumentation 

April  25 

7.2  gal/hr 

Rotometer  used 

June  27 

7.18  gal/hr 

July  5 

6.60  gal/hr 

July  18 

8.12  gal/hr 

500  gallon  fill  in  96  hrs. 

August  1 

7.71  gal/hr 

500  gallon  fill  in  97  hrs. 

August  8 

6.93  gal/hr 

August  15 

6.87  gal/hr 

Both  500  gallon  tank  fills  will  be  assumed  to  be  a representative  example  of 
field  production  rates  of  the  LOX-30  system.  Hourly  graphs  of  the  500  gallon 
fills  are  presented  in  Fig.  3A  and  Fig.  3B  along  with  a trend  line  of  pro- 
duction rates.  It  was  assumed,  by  examination,  that  the  liquid  oxygen  pro- 
duction rates  can  follow  a linear  trend  therefore  the  linear  regression  line 
was  calculated.  Using  the  method  of  list  squares  and  the  normal  equations, 
the  trend  lines  were  calculated  to  be: 

1.  July  20  thru  July  24 

Y - 7.59  + .0108X 

2.  August  1 to  August  5 

Y = 6.79  + .018X 

Both  curves  do  show  a positive  upward  slope  Indicating,  as  product  time 
continued,  a gradual  increase  of  production  rates  was  experienced.  The 
calculated  statistics  for  the  two  90  hour  periods  are: 

1.  July  20  thru  July  24 
(mean  X - 8.11  gal /hr) 

(variance  « .42  gal/hr). 
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2.  August_l  thru  August  5 
(mean  X ■ 7.72  gal/hr 
(variance)  ■ .91  gal/hr 

NOTE;  The  trend  lines  for  the  above  periods  are  not  to  be  considered  the 
production  operating  curves  for  the  LOX-30  system.  Although  the  test  data 
could  be  assumed  to  follow  a linear  trend,  especially  July  data,  the  corre- 
lation coefficient  for  both  lines  are  relatively  low. 

CORK  (July)-  .47 
CORR  (Aug)  - .56 

Engineering  Intuition  dictates  that  production  rates  probably  will  follow 
a sinusoidal  rather  than  a linear  trend  due  to  the  cyclic  dally  variations  of 
temperature  and  humidity. 

E.  Prior  to  each  working  week  and  change  of  shift,  a pre-operatlopal  inspec- 
tion and  briefing  was  conducted  for  the  purpose  of  proper  system  operation 
and  parameter  trends.  Parameters  that  were  of  Importance  were  recorded  on 
dally  run  sheets  and  any  peculiar  trends  were  recorded  in  a dally  log  book. 
The  normal  test  week  began  at  8 am  Monday  morning  and  ran  through  to  Satur- 
day afternoon.  Deviations  from  the  weekly  test  plan  occurred  twice.  Once 
to  simulate  a 14  day  continuous  operating  run  and  training  purposes  for  Pax 
River  personnel. 

r.  CLASSIFICATION  OF  FAILURE. 

1.  A failure  of  the  LOX-30  system  Is  defined  as  a malfunction  which  pre- 
cluded performance  of  any  required  function  within  the  limits  established. 
Failures  are  classified  In  accordance  with  paragraph  5.5  of  MIL-STD-781  and 
as  follows: 


a.  Failure  Types 

Type  1 - Must  stop  operations  to  fix  or  repair.  The  equipment 

is  unable  to  go  through  one  more  operating  cycle  or  a condition  exists  where 
the  safety  of  the  equipment,  or  operating  crew  would  be  In  jeopardy  if  oper- 
ations were  to  continue.  Failures  in  this  category  result  in  abort  of  the 
remaining  mission. 

Type  11  - Operations  may  continue,  but  monitoring  of  the  failed 

or  malfunctioning  equipment  Is  required. 

Type  111  - Failure  or  malfunction  is  not  serious  in  terms  of  con- 
tinued operations,  and  repair  or  replacement  can  be  safely  conducted  to  resume 
operation. 

Type  IV  - Equipment  has  experienced  a catastrophic  or  major 

failure. 
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G.  FAILURE  CATEGORIES.  ; 

Relevant  - inability  of  the  generator  to  perform  one  of  its  Intended  I 

and  specified  functions  within  the  specified  limits.  ! 

Non-relevant  - failures  due  to  the  following  causes:  j 

H 

1.  A secondary  or  dependent  failure  that  is  caused  by  the  failure 
associated  items.  For  every  secondary  failure  classified  as  not  relevant, 
a primary  or  Independent  failure  shall  be  Identified. 

2.  A test  operator  or  test  facility  Induced  failure  may  be  classified  as 
non-relevant  if  it  can  be  substantiated  that  the  equipment  was  subject  to 
operation  or  stress  conditions  beyond  specified  limits. 

3.  Changes  to  the  generator  to  correct  a deficiency  that  caused  a fail- 
ure shall  not  classify  such  a failure  as  not  relevant  until  the  changes 
have  been  demonstrated  as  a fully  effective  correction. 

4.  Preventative  maintenance,  servicing  and  adjustments  are  non-relevant 
if  such  actions  are  specified  as  normal  maintenance  in  the  existing  or 
planned  technical  manuals, 

5.  Type  II  and  Type  III  failures  are  considered  non-relevant  except  in 
the  event  that  they  degenerate  into  Type  1 or  Type  IV  failure. 

H.  DISCUSSION. 

1.  The  LOX-30  generator  accumulated  a total  of  2327  hours  of  which  1617 
hours  Involved  reliability  testing.  Operating  hours  were  recorded  by  an 
elapsed  time  meter  Installed  on  the  control  panel  and  energized  only  when 
the  cryogenerator  was  turned  on.  The  additional  compressor  time  is  due  to 
plant  pre/post  preparation.  Therefore  the  total  operating  times  are  as 
follows: 

Total  Compressor  Operating  Time  1732  hours 

Total  LOX  Production  Time  1617  hours 

A total  of  four  failures  were  recorded  during  the  test.  Each  failure  is 
documented  by  the  Failure  Reports  which  are  included  in  Appendix  C. 

2.  The  failures  and  their  classifications  are  as  follows: 

Failure  No.  Descript Type 

1 Quick  Disconnect  Fitting  II 

2 Electro-Pneumatic  Solenoid  Valve  III 

3 Solenoid  Air  Valve  III 

4 Pipe,  Compressor  Discharge  111 

Of  the  above  failures  none  were  of  the  relevant  category. 
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3.  Accept/reject  criteria  for  the  demonstration  were  In  accordance  with 
test  plan  VIII  of  MIL-STD-781.  The  test  Is  a sequential  type  with  a discrim- 
ination ratio  of  2.0:1  with  an  alpha  and  beta  risk  of  30%.  Requirements  of 
this  test  plan  are  presented  in  Figure  3.  Discrimination  ratio  is  defined 

as  the  ratio  of  specified  MTBF  0^^  and  the  minimum  acceptable  MTBF  0,  l.e., 
0q/0,  where  0 » 1900  hours  and  0^  » 950  hours.  The  sequential  test  plan 
is  predicted  on  the  assumption  that  the  times  between  failure  of  the  LOX-30 
system  is  exponentially  distributed.  As  per  test  plan  VIII  an  accept  decis- 
ion was  reached  at  161  7 hours  without  a relevant  failure. 

4.  Because  of  the  sample  size  and  the  number  of  failures  accumulated 
during  the  test,  the  failure  distribution  of  the  LOX-30  system  is  unable, 
with  a good  degree  of  confidence,  to  be  determined.  Therefore,  until  fur- 
ther data  is  accumulated  from  other  facilities  and  tests,  it  will  be  assum- 
ed that  the  LOX-30  system  failure  rate  follows  as  exponential  distribution. 

Therefore  the  following: 

_ ^ 

0 

R(t)  - e 
where : 

t • mission  time  (90  hours) 

0 “ minimum  acceptable  MTBF  (950  hours) 

R(t)  ” Probability  of  a failure  free  mission 

_ 22 
950 

R(90)  - e 
R(90)  - .90 

The  probability  that  the  LOX-30  system  will  operate  failure  free  for 
90  continuous  hours  is  90%. 

5.  Although  no  relevant  failures  occurred  during  the  test,  corrective 
action  was  taken  on  the  following  failures: 

a.  During  normal  operation,  it  had  been  observed  by  the  operators 
that  adjustment  of  liquid  levels  in  the  column  and  storage  tank  had  become 
increasingly  difficult  to  stabilize.  Hampson  Meter  readings  Imd  begun  to 
read  eratlc  and  at  times  no  reading  at  all.  After  an  investigation  of  the 
Hampson  Meter,  it  was  discovered  that  the  (luick  disconnects  were  bruised  and 
cracked  at  the  ends.  Replacement  of  the  quick  disconnect  was  necessary. 

After  replacement,  normal  readings  were  observed. 

b.  During  normal  operation  absorber  number  two  failed  to  switch  over 
automatically  or  manually.  During  pre-reliability  tests  the  solenoids  of  the 
electric  heater  and  absorbers  1 and  2 were  connected  to  a moist  control  air 
stream.  After  continued  operation,  the  actuation  chamber  of  the  solenoid 
valves  became  rusty  resulting  In  the  plunger  of  the  actuator  to  freeze  up. 

To  relieve  this  problem,  the  control  air  line  was  relocated  from  the  wet 
air  side  of  the  adsorbers  to  the  dry  air  side. 
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In  addition,  both  chambers  were  disassembled  and  lubricated.  Engineering 
investigations  concluded  that  lubrication  of  the  plunger  shaft  will  be  re- 
quired at  1500  hour  intervals.  A statistical  analysis  of  the  solenoid 
mechanisms  are  in  Appendix  E. 

c.  During  normal  operation,  the  adsorbers  failed  to  switch  auto- 
matically. After  manually  switching  of  the  adsorbers  was  completed,  a 
slight  air  leak  was  found  at  the  fitting  that  houses  the  solenoid  valve. 

After  disassembly,  it  was  discovered  that  the  threads  were  stripped  thus 
not  permitting  enough  air  pressure  to  flow  into  the  assembly  to  allow 
adsorber  switching.  The  cause  for  the  leak  was  excessive  tightening  of 
the  steel  thread  to  an  aluminum  housing.  Like  joining  metals  of  the  assem- 
bly was  reconanended  along  with  specified  torque  valves. 

d.  During  normal  operation,  the  discharge  pipe  connection  between 
the  air  compressor  and  molecular  sieve  station  vibrated  excessively  result- 
ing in  pipe  fracture.  Upon  assembly  of  the  LOX-30  unit  air  compressor, 
shipment  of  the  proper  dampner  for  the  discharge  pipe  was  never  supplied. 

Electrical  transducers  were  mounted  on  the  pipe  during  post  reliability 
tests  and  showed  that  the  pipe  vibrated  at  approximately  1660  Hz  in  the 

X,  y and  z direction.  A vibration  dampner  at  the  compressor  discharge 
pipe  is  necessary  for  proper  plant  operation. 

T.  OBSERVATION  AND  DEDUCTIONS. 

From  the  data  accumulated  and  from  findings  uncovered  during  the  phase 
of  study  several  observations/deductions  may  be  made: 

— Although  cryogenic  systems  have  been  in  existence  for  many  years, 
very  little  statistically  significant  reliability  data  is  available  on 
liquid  oxygen  systems  and  components. 

— Because  of  usual  high  cost  and  large  size,  liquid  oxygen  compon-  | 

ents  are  traditionally  used  at  near  their  full  capacity.  Consequently,  1 

adequate  derating  Is  an  important  factor  in  cryogenic  systems.  j 

— Data  show  very  little  field  data  available  for  cryogenic  systems.  | 

I 

— Little  effort  has  been  expended  in  the  area  of  physics-of-failure 

and  stress  studies  of  these  systems.  | 

I 

— In-plant  life  tests  are  too  short  duration  to  yield  any  significant  ; 

data  for  predicting  the  useful  life  and  wear-out  characteristics  of  cryo-  j 

genic  systems. 

— The  survival  cumulative  distribution  of  most  cryogenic  systems  is 
unknown.  It  is  only  assumed  that  their  survival  cumulative  distribution 
follow  those  of  complex  system  components. 

It  is  only  assumed  that  their  life  characteristics  exhibit  periods  of 
"early  life",  "constant  failure-rate",  and  "wear-out". 
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From  a reliability,  as  well  as  a design  engineer's  viewpoint,  all  the 
points  expressed  are  of  interest.  To  the  reliability  engineer  and  those 
responsible  for  advancing  reliability  technology  in  cryogenic  components, 
the  last,  is  of  most  interest. 

If  survival  cumulative  distribution  function  could  be  identified  with 
any  degree  of  accuracy  for  each  application  of  liquid  oxygen  or  nitrogen 
components,  decisions  could  be  made  on  what  is  the  optimum  period  to  burn- 
in  each  component  be  replaced  just  before  effects  of  wear-out  become 
excessive,  and  how  to  design  for  optimizing  the  useful  life  period.  Find- 
ing the  survival  cumulative  distribution  function,  however,  for  cryogenic 
components  is  not  a simple  task. 

J . CONCLUSIONS. 

The  LOX-30  liquid  oxygen  system  satisfactorily  completed  the  reliabil- 
ity tests  meeting  the  requirements  established  in  the  test  plans. 

The  LOX-30  system  experienced  four  irrelevant  failures,  none  of  which 
caused  any  excessive  down  time  for  repair. 

During  operation  of  the  LOX-30  system,  it  is  imperative  that  no  less 
than  two  operators  be  assigned  for  efficient  plant  operation. 

After  the  LOX-30  system  has  reached  its  liquid  oxygen  production  phase, 
monitoring  of  instruments  is  recommended  every  thirty  minutes. 

Contractor  operational  procedures  and  manuals  were  incomplete. 

K.  RECOMMENDATIONS. 

Lubricate  the  electro-pneumatic  solenoid  actuation  chamber  of  the  valves 
on  the  molecular  sieve  skid  at  an  assigned  Interval  of  1500  hours. 

Operational  procedures  for  the  LOX-30  system  must  be  rewritten  for 
efficient  operation. 
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FAILURE  REPORT 

MODULAR  CRYOGENIC  OXYGEN  GENERATOR 

Failure  No.  1 Date:  13  April  1977 

Generator  Ser.  No.  LOX-30 Elapsed  Time  Meter  1017.8 

Identification  of  failed  Item: 

Nomenclature  (MJICK  DISCONNECT  FITTINGS 

Part  No.  320-104 Serial  No.  

Mode  of  Operation  when  discovered:  Normal  liquid  O2  production. 

Result  of  failure  (abort,  degraded,  etc.):  Incorrect  liquid  level  indication. 

Description  of  failure:  Liquid  level  Indication  could  not  be  maintained. 
Indicating  liquid  would  rise  out  of  the  top  of  meter  when  connected. 

Description  of  cause:  Seat  of  disconnect  was  broken  and  cracked. 

Action  taken:  Replaced  quick  disconnect  with  new  ones. 

Recommendation  to  prevent  recurrence: 

Categorization  of  failure  (see  paragraph  II  ) 


Time  for 

fault  location 

Hours 

.2 

No.  of  Personnel 

1 

No.  of  Manhours 

.2 

Time  for 

repair 

.4 

1 

.4 

\ 

Time  for 

checkout 

.2 

1 

.2 

Total 

.8 

1 

.8 

Total  downtime  (total  time  from  failure  to  back  In  operation) 

Report  prepared  by  C.R.  CORKUM 

(Print) 
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FAILURE  REPORT 

MODULAR  CRYOGENIC  OXYGEN  GENERATOR 

Failure  No.  2 Date:  28  April  1977 

Generator  Ser.  No.  LOX-30 Elapsed  Time  Meter  1151 

Identification  of  failed  item: 

Nomenclature  ELECTRO-PNEUMATIC  SOLENOID  VALVE 

Part  No.  Serial  No.  62.35.50 

Mode  of  Operation  when  discovered:  Normal  operating. 

Result  of  failure  (abort,  degraded,  etc.):  System  shut-down. 

Description  of  failure:  Adsorber  #2  failed  to  switch  automatically  or  manually. 

Description  of  cause:  During  pre-test  runs,  the  solenoids  of  the  electric 
heater  and  adsorbers  #1  & #2  were  In  a moist  air  stream  causing  corrosion. 
Action  taken:  A snap  ring  made  from  wire  was  placed  Inside  of  rubber  plunger. 

Plunger  shaft  lubricated  every  1500  hrs.  of  operation.  Failed  solenoid  valve 
Recommendation  to  prevent  recurrence:  tubing  Is  in  stream  with  dry  air. 

Lubrication  of  shaft  every  1500  hrs.  and  re-route  tubing  from  moist  air  stream 
to  In  stream  dry  air  source. 

Categorization  of  failure  (see  paragraph  III  ) 


1 

1 

I 


Hours 

No.  of  Personnel 

No.  of 

Manhours 

Time  for 

fault  location 

1 hr. 

1 

1 

Time  for 

repair 

.75 

1 

.75 

Time  for 

checkout 

.50 

1 

.50 

Total 

2H 

1 

2h, 

Total 

' jwntime  (total 

time  from 

failure  to  back 

In  operation) 

4 hrs. 

Report  prepared  by  ROMAN  FERRET 

(Print) 
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FAILURE  REPORT 


MODULAR  CRYOGENIC  OXYGEN  GENERATOR 


Failure  No. 


Date:  9 May  1977 


Generator  Ser.  No.  LOX-30 


Elapsed  Time  Meter  1570.2 


Identification  of  failed  Item: 

Nomenclature  SOLENOID  OPERATED  AIR  VALVE  (TILLER  PNEUMATIC) 
Part  No.  Serial  No.  33.311.011 


Mode  of  Operation  when  discovered:  Normal  operation. 


Result  of  failure  (abort,  degraded,  etc.):  Had  to  change  from  automatic 
control  to  manual  control  to  change  adsorber  //I  to  #2. 

Description  of  failure:  Adsorber  failed  to  change. 


Description  of  cause:  Fitting  that  houses  the  valve  was  stripped  and  leaked 
not  allowing  enough  pressure  Into  the  actuation  chamber. 

Action  taken:  Remove  valve  for  engineering  study. 

Recommendation  to  prevent  recurrence:  Avoid  a steel  fitting  thread  Into  an 
aluminum  body. 

Categorization  of  failure  (see  paragraph  III  ) 


Hours  No.  of  Personnel  No.  of  Manhours 


Time  for  fault  location 
Time  for  repair 
Time  for  checkout 
Total 


.2 


Total  downtime  (total  time  from  failure  to  back  In  operation) 


Report  prepared  by  C.R.  CORKUM 


(Print) 


3C 


NAEC-92-  124 


FAILURE  REPORT 


MODULAR  CRYOGENIC  OXYGEN  GENERATOR 


Failure  No.  4 


Generator  Ser.  No.  L0X-30 


Identification  of  failed  Item: 


Nomenclature  PIPE  NIPPLE 


Part  No. 


Date:  18  July  1977 


Elapsed  Time  Meter  1705.3 


Serial  No. 


Mode  of  Operation  when  discovered:  Normal  O2  operation. 


Result  of  failure  (abort,  degraded,  etc.):  Plant  shut-down. 


Description  of  failure:  Pipe  nipple  at  the  discharge  end  of  the  air  compressor 
ruptured. 

Description  of  cause:  Rupture  due  to  excessive  vibration. 

Action  taken:  Remove  and  replace  nipple. 

Recommendation  to  prevent  recurrence:  Install  discharge  piping  as  described 
In  compressor  manual.  Still  waiting  for  design  change  from  manufacturer. 

Categorization  of  failure  (see  paragraph  III  ) 


Time  for  fault  location 


Time  for  repair 
Time  for  checkout 


Total 


Hours 

Immed- 

iate 


5 min. 


No.  of  Personnel 


No.  of  Manhours 


Immediate 


h hr. 


5 min. 


Total  downtime  (total  time  from  failure  to  back  In  operation)  45  min. 


Report  prepared  by  ROMAN  FERRET 

(Print) 
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ANALYSIS  FOR  THE  ELECTRO-PNEUMATIC 
SOLENOIDS  OF  THE  LOX-30  SYSTEM 


The  Welbull  distribution  is  widely  used  in  engineering  situations 
because  of  its  versatility.  It  was  originally  proposed  for  the  Inter- 
pretation of  fatigue  data,  but  now  its  use  has  extended  to  many  other 
engineering  problems.  The  usefulness  of  the  Welbull  distribution  stems 
from  the  use  of  straightline  plots  to  represent  experimental  data. 
Special  Welbull  plotting  paper  is  required  but  the  graphical  interpre- 
tation is  reasonable  straight  forward.  Although  the  Welbull  distribu- 
tion can  be  applied  to  most  any  engineering  problems,  its  main  applica- 
tion Is  in  the  field  of  failure  life  situations.  In  general,  the 
Welbull  distribution  best  describes  the  parameters  of  parts  or  its  com- 
ponents, while  the  exponential  distribution  is  most  applied  to  assem- 
blies and  systems. 

The  Welbull  cumulative  distribution  function  is: 


Where; 


Xq  ■ expected  minimum  value  of  x (location  parameter) 
b * Welbull  slope  (shape  parameter) 

0 - characteristic  value  (scale  parameter) 

In  working  with  many  life  phenomena  it  is  reasonable  to  assume,  as  in 
the  case  of  the  solenoid  switches  of  the  LOX-30  system,  that  the  lower 
bound  of  life  xq.  Is  equal  to  zero.  This  reduces  the  Welbull  cumulative 
distribution  function  to  the  two-parameter  equation: 


When  attempting  to  calculate  the  Welbull  slope  of  life  data,  very  cum-  ^ 

bersome  calculations  are  needed.  Therefore,  there  is  need  for  a method  of  i 

expediting  the  conversion.  This  is  done  with  a special  coordinate  paper  ] 

known  as  Welbull  Probability  Paper.  i 

i 

The  following  are  the  malfunction  times  in  hours  that  the  solenoid 
switches  did  not  operate  in  the  automatic  mode.  (Manual  switch  required, 
operation  of  plant  not  affected). 

224,  442,  482,  558,  764,  855,  893,  902,  1020,  1111,  1212,  1286,  1491, 

1696,  1816,  2124,  2371  and  2437  hours. 

With  use  of  Welbull  Probability  Paper  the  Welbull  slope,  characteristic 
life,  mean  life  and  the  life  of  these  switches  are  calculated. 


2E 
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Life  to  Incident 


Median  Ranks  % 


224 

.04 

442 

.09 

482 

.15 

558 

.20 

769 

.26 

855 

.31 

893 

.36 

902 

.42 

1020 

.47 

nil 

.53 

1212 

. 58 

1286 

.64 

1491 

.69 

1696 

. 74 

1816 

.80 

2124 

.85 

2371 

.91 

2437 

.96 

Plotting  the  data  on  Weibull  Probability  Paper,  the  estimate  of  the 
Welbull  slope  Is  1.8.  It  Is  known  that  the  log-normal  distribution  has 
a Welbull  slope  of  2.0;  therefore,  it  Is  reasonable  to  assume  that  the 
solenoid  switches  failure  rate  follows  the  log-normal  distribution.  For 
a higher  accuracy,  this  line  could  be  fitted  by  the  least-squares  method 

Characteristic  Life 


By  definition,  characteristic  life  0 is  the  life  corresponding  to 
61.2/.  failure. 

Tlierefore,  0 - 1180  hours 

Mi'iin  l.lfjP 

The  percent  failed  is  mean  - 55.5%  for  b-1.8.  From  the  Welbull  Plot 
corresponding  to  55.5%  is 

Mean  Life  ” 1200  hours 

Bj^O  Life 


The  life  corresponding  to  10%  failure  is  » 380  hours. 

It  can  be  said  that  10%  of  the  population  Is  expected  to  have  life 
less  than  or  equal  to  Bj^q  life  380  hours. 
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